Sophos Auto update not working in Enterprise Console

 Hi,

Sophos Enterprise Manager is not updating automatically. Each and every time I need to restart the "Sophos Update Manager" Service and "Sophos Message Router" Service to update the enterprise console.

 

Please help, its been happening for 6 months.

 

Thanks,

Vivek Krishnakumar

  • Hello Vivek Krishnakumar,

    it's not clear what it is that is not updating automatically. Could you perhaps provide screenshots that show what you are referring to?

    Christian

  • In reply to QC:

    Hi Chris,

    Currently the issue resolved, after I have restarted the services. I will attach the screenshots when the issue happens again.

    Thanks,

    Vivek

  • In reply to QC:

    Hi Christian,

    I have attached a screenshot of Enterprise console.The Updates will be stuck at "Downloading Binaries".

    Every time I need to restart the "Sophos Update Manager" and "Sophos Message Router" Service to fix the downloading of updates.

     

    Please advice.

     

    Thanks ,

    Vivek Krishnakuamr

  • In reply to Vivek VK:

    Hello Vivek Krishnakuamr,

    I don't think it is SUM that gets stuck. If you go to the Endpoints view, tab Computer Details, what timestamp is in the Last message time column for SJB-SR-SB3 (and also for the other endpoints)?

    Christian

  • In reply to QC:

    Hi Christian,

    Please see the screenshot of last message time.

  • In reply to Vivek VK:

    Hello Vivek Krishnakuamr,

    what is the current Last updated in the Update Managers view? I assume you have restarted the services after the screenshot that says 08/02/2019, haven't you?

    Christian

  • In reply to QC:

    Hi Christian,

    I have not restarted the services, the updates are still stuck.

  • In reply to Vivek VK:

    Hello Vivek Krishnakuamr,

    the latest SUMTrace log in %ProgramData%\Sophos\Update Manager\Logs\ and Agent log in %ProgramData%\Sophos\Remote Management System\3\Agent\Logs\ should show if SUM is indeed stuck. Also please check the timestamp on master.upd in \\yourserver\SophosUpdate\CIDs\S000\SAVSCFXP\.

    Christian

  • In reply to QC:

    Hi Christian,

    I have checked the logs and there are no blocked logs.

    Log that shown in Update maanger logs

    2019-02-12 00:54:39 : Tue Feb 12 00:54:39 2019 - No action

    2019-02-12 00:54:41 : Tue Feb 12 00:54:41 2019 - No action

    2019-02-12 00:55:40 : Tue Feb 12 00:55:40 2019 - No action

    2019-02-12 00:55:41 : Tue Feb 12 00:55:41 2019 - No action

    2019-02-12 00:55:43 : Tue Feb 12 00:55:43 2019 - ACTION

    2019-02-12 00:55:43 : Cmd-ALL << [I1022][DispatcherPrograms-2019-02-12T00-55-43-106] Dispatcher with ID 'DispatcherPrograms-2019-02-12T00-55-43-106' skipped, because one or more associated events are still in progress.

    2019-02-12 00:56:42 : Tue Feb 12 00:56:42 2019 - No action

    2019-02-12 00:56:44 : Tue Feb 12 00:56:44 2019 - No action

    2019-02-12 00:56:45 : Tue Feb 12 00:56:45 2019 - No action

    2019-02-12 00:57:45 : Tue Feb 12 00:57:45 2019 - No action

     

    The master.upd date, please find below.

  • In reply to Vivek VK:

    Hello Vivek Krishnakuamr,

    Dispatcher with ID 'DispatcherPrograms-2019-02-12T00-55-43-106' skipped, because one or more associated events are still in progress
    suggests there's indeed something stuck in SUM and the timestamps you show confirm this. If your SUMTrace logs date back to 07/02/2019 copy them to some other location. It's necessary to rummage through them to find the point where it apparently stops processing.
    If the logs are still there I'd suggest you use SDU to collect all logs and send them to Support. 

    Christian 

  • In reply to QC:

    Hi Christian,

    I have cleared the working folder and the Warehouse folder. Now I am getting a separate error.

    2019-02-15 13:31:58 : <ERROR> WarehouseListData: Failed to load valid customer file content. Error: Cannot locate server for sophos.bdcs.org.uk/.../sumcf.dat
    2019-02-15 13:31:58 : <Info> WarehouseListData: Failure loading customer file content. Attempting to read backed up customer file...
    2019-02-15 13:31:58 : <ERROR> WarehouseListData: Failed to load valid backup customer file content. Error: Cannot locate server for sophos.bdcs.org.uk/.../sumcf.bk
    2019-02-15 13:31:58 : <ERROR> Product release operation failed: WarehouseListData: Failed to read customer file content.

     

     

    2019-02-15 13:32:43 : Cmd-Sock-768 >> DumpDefaultTargetSite
    2019-02-15 13:32:43 : Cmd-Sock-768 << [R0000][C:\ProgramData\Sophos\Update Manager\Update Manager\][\\SJB-SR-SB3\SophosUpdate][ST-JOBARKING\SophosUpdateMgr][BwjCxYXw/0PUE9OdRqGaMmgXAkkY3WD4D/E=] Local path: C:\ProgramData\Sophos\Update Manager\Update Manager\ Remote path: \\SJB-SR-SB3\SophosUpdate Username: ST-JOBARKING\SophosUpdateMgr Obfuscated password: BwjCxYXw/0PUE9OdRqGaMmgXAkkY3WD4D/E=
    2019-02-15 13:32:43 : Cmd-Sock-768 <<
    2019-02-15 13:33:00 : Fri Feb 15 13:33:00 2019 - No action
    2019-02-15 13:33:00 : Fri Feb 15 13:33:00 2019 - No action
    2019-02-15 13:33:00 : Fri Feb 15 13:33:00 2019 - No action
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionDecodeEverything-Sub0
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGatherCurrencyData-Sub0
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGenerateCid-Sub0
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionDeployCids-Sub0-0
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionDecodeEverything-Sub1
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R4000] Could not find object named ActionDecodeEverything-Sub1
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGatherCurrencyData-Sub1
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGenerateCid-Sub1
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R4000] Could not find object named ActionGenerateCid-Sub1
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionDeploySDF-Sub1-0
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionDecodeEverything-Sub2
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R4000] Could not find object named ActionDecodeEverything-Sub2
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGatherCurrencyData-Sub2
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGenerateCid-Sub2
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R4000] Could not find object named ActionGenerateCid-Sub2
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionDeploySDF-Sub2-0
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Reset complete.
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionDecodeEverything-Sub3
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R4000] Could not find object named ActionDecodeEverything-Sub3
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGatherCurrencyData-Sub3
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R4000] Could not find object named ActionGatherCurrencyData-Sub3
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> Reset ActionGenerateCid-Sub3
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R4000] Could not find object named ActionGenerateCid-Sub3
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:33:27 : Cmd-Sock-768 >> ForceDispatcher DispatcherPrograms
    2019-02-15 13:33:27 : Cmd-ALL << [I101D][DispatcherPrograms-2019-02-15T13-33-27-1][2] Events of dispatcher with ID 'DispatcherPrograms-2019-02-15T13-33-27-1' triggered by user. It will run 2 events.
    2019-02-15 13:33:27 : Cmd-Sock-768 << [R0000] Forced Dispatcher named DispatcherPrograms...
    2019-02-15 13:33:27 : Cmd-Sock-768 <<
    2019-02-15 13:34:03 : Fri Feb 15 13:34:03 2019 - No action
    2019-02-15 13:34:03 : Fri Feb 15 13:34:03 2019 - No action
    2019-02-15 13:34:03 : Fri Feb 15 13:34:03 2019 - No action
    2019-02-15 13:35:05 : Fri Feb 15 13:35:05 2019 - No action
    2019-02-15 13:35:05 : Fri Feb 15 13:35:05 2019 - No action
    2019-02-15 13:35:05 : Fri Feb 15 13:35:05 2019 - No action
    2019-02-15 13:36:08 : Fri Feb 15 13:36:08 2019 - No action
    2019-02-15 13:36:08 : Fri Feb 15 13:36:08 2019 - No action
    2019-02-15 13:36:08 : Fri Feb 15 13:36:08 2019 - No action
    2019-02-15 13:37:10 : Fri Feb 15 13:37:10 2019 - No action
    2019-02-15 13:37:10 : Fri Feb 15 13:37:10 2019 - No action
    2019-02-15 13:37:10 : Fri Feb 15 13:37:10 2019 - No action
    2019-02-15 13:38:12 : Fri Feb 15 13:38:12 2019 - No action
    2019-02-15 13:38:12 : Fri Feb 15 13:38:12 2019 - No action
    2019-02-15 13:38:12 : Fri Feb 15 13:38:12 2019 - No action

     

    Please advise.

  • In reply to Vivek VK:

    Hello Vivek Krishnakumar,

    this server doesn't update from Sophos but some other server?
    What is in the part you've left out (between 13:31:58 and 13:32:43)?

    Christian

  • In reply to QC:

    Hi Christian,

    Yes, It's updating from 

    sophos.bdcs.org.uk/downloads

    sophos.bardaglea.org.uk/.../

    http://sophos.nrcs.bardaglea.org.uk

     

    Sophos Update Manager v1.7.0.316 Copyright 2009-2018 Sophos Limited. All rights reserved.

    Sophos Update Manager has started up.

    2019-02-15 13:31:58 : EventLog: 1610616833 4 Inserts:>
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> ParseConfigFile system.xml reserved
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Parsed Config File 'system.xml': 13 objects created.
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> ParseConfigFile config.xml default
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Parsed Config File 'config.xml': 32 objects created.
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> ParseConfigFile specialactions.xml specialactions
    2019-02-15 13:31:58 : UpdateLogViewerDictionaryOperation - Cancel called, but will do nothing.
    2019-02-15 13:31:58 : WarehouseStatusOperation - Cancel called, but will do nothing.
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Parsed Config File 'specialactions.xml': 88 objects created.
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> Execute ApplyOverrideFile
    2019-02-15 13:31:58 : Cmd-Terminal << [R4000] Could not find object named ApplyOverrideFile
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> Restart
    2019-02-15 13:31:58 : UpdateLogViewerDictionaryOperation - Cancel called, but will do nothing.
    2019-02-15 13:31:58 : WarehouseStatusOperation - Cancel called, but will do nothing.
    2019-02-15 13:31:58 : Dispatcher started...
    2019-02-15 13:31:58 : Dispatcher started...
    2019-02-15 13:31:58 : Cmd-ALL << [I1025][0] Performing action with ConnectionMode '0'.
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Restart complete.
    2019-02-15 13:31:58 : Schedule 'ScheduleSupplements' entered new TimeBlock, trigger offset = 43 minutes.
    2019-02-15 13:31:58 : Schedule '__MAINTENANCE_SCHEDULE__' entered new TimeBlock, trigger offset = 250 minutes.
    2019-02-15 13:31:58 : Dispatcher started...
    2019-02-15 13:31:58 : Cmd-ALL << [I1021][ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672][] Action 'ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672' with caller '' started...
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Fri Feb 15 13:31:58 2019 - No action
    2019-02-15 13:31:58 : Schedule 'SchedulePrograms' entered new TimeBlock, trigger offset = 46 minutes.
    2019-02-15 13:31:58 : Fri Feb 15 13:31:58 2019 - No action
    2019-02-15 13:31:58 : Cmd-Terminal >> StartListeners
    2019-02-15 13:31:58 : Fri Feb 15 13:31:58 2019 - No action
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Started 1 SocketListener.
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> Execute WeeklyReportDispatcher
    2019-02-15 13:31:58 : Cmd-Terminal << [R4000] Could not find object named WeeklyReportDispatcher
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> Execute __MAINTENANCE_DISPATCHER__
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Executing Object named __MAINTENANCE_DISPATCHER__...
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> ForceDispatcher __MAINTENANCE_DISPATCHER__
    2019-02-15 13:31:58 : Cmd-ALL << [I101D][__MAINTENANCE_DISPATCHER__-2019-02-15T13-31-58-1][1] Events of dispatcher with ID '__MAINTENANCE_DISPATCHER__-2019-02-15T13-31-58-1' triggered by user. It will run 1 events.
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Forced Dispatcher named __MAINTENANCE_DISPATCHER__...
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : Cmd-Terminal >> StartDispatchers
    2019-02-15 13:31:58 : Cmd-Terminal << [R0000] Started 3 dispatchers.
    2019-02-15 13:31:58 : Cmd-Terminal <<
    2019-02-15 13:31:58 : <ERROR> WarehouseListData: Failed to load valid customer file content. Error: Cannot locate server for sophos.bdcs.org.uk/.../sumcf.dat
    2019-02-15 13:31:58 : <Info> WarehouseListData: Failure loading customer file content. Attempting to read backed up customer file...
    2019-02-15 13:31:58 : <ERROR> WarehouseListData: Failed to load valid backup customer file content. Error: Cannot locate server for sophos.bdcs.org.uk/.../sumcf.bk
    2019-02-15 13:31:58 : <ERROR> Product release operation failed: WarehouseListData: Failed to read customer file content.
    2019-02-15 13:31:58 : Cmd-ALL << [E4016][5d207ce2-ab92-4ca0-b172-0711aca59672][WarehouseListData: Failed to read customer file content.] Failed to obtain product releases.
    2019-02-15 13:31:58 : Cmd-ALL << [E400D][ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672][] Action 'ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672' with caller '' failed!
    2019-02-15 13:31:58 : Cmd-ALL << [W4045] There was an error during HTTPS (secure) synchronization. The problem was related to the usage of HTTPS.
    2019-02-15 13:31:58 : Cmd-ALL << [W4042] The connection is falling back to HTTP.
    2019-02-15 13:31:58 : Cmd-ALL << [I1021][ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672][] Action 'ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672' with caller '' started...
    2019-02-15 13:32:07 : SocksSocketAcceptor called Accept. Parameters: socket = 692 sockaddr = 0x025AF944 addr_length = 0x025AF940 Return code: 300
    2019-02-15 13:32:07 : Connection accepted from host 127.0.0.1
    2019-02-15 13:32:07 : The socket 768 was created.
    2019-02-15 13:32:07 : Cmd-Sock-768 <<
    2019-02-15 13:32:07 : Cmd-Sock-768 >>
    2019-02-15 13:32:07 : Cmd-Sock-768 >> DumpLogHistory
    2019-02-15 13:32:07 : Cmd-Sock-768 << [R0000] Dumping the log history...
    2019-02-15 13:32:07 : Cmd-Sock-768 << [I1001]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [I1025][0]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [I1021][ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672][]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [I101D][__MAINTENANCE_DISPATCHER__-2019-02-15T13-31-58-1][1]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [E4016][5d207ce2-ab92-4ca0-b172-0711aca59672][WarehouseListData: Failed to read customer file content.]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [E400D][ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672][]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [W4045]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [W4042]
    2019-02-15 13:32:07 : Cmd-Sock-768 << [I1021][ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672][]
    2019-02-15 13:32:07 : Cmd-Sock-768 <<
    2019-02-15 13:32:07 : Cmd-Sock-768 >> DumpConfigXML default
    2019-02-15 13:32:07 : Cmd-Sock-768 << [R0000][<?xml version="1.0" encoding="utf-8" ?><Config><Action><ID>ActionDecodeEverything-SDDM</ID><Operation>Decode</Operation><Payload>Payload-SDDM</Payload><BaseDecodePath>./Decoded-SDDM</BaseDecodePath></Action><Action><ID>ActionDecodeEverything-Sub0</ID><Operation>Decode</Operation><Payload>Payload-Sub0</Payload><BaseDecodePath>./Decoded-Sub0</BaseDecodePath></Action><Action><ID>ActionDeployCids-Sub0-0</ID><Operation>CIDDeploy</Operation><Library>CIDGen.dll</Library><Dependency>ActionGenerateCid-Sub0</Dependency><CIDGenAction>ActionGenerateCid-Sub0</CIDGenAction><NewCidDir>C:\ProgramData\Sophos\Update Manager\Update Manager\CIDs\S000</NewCidDir><Username></Username><Password obfuscated="true"></Password><Security>Sizes</Security><MakeBootable></MakeBootable></Action><Action><ID>ActionDeploySDF-Sub1-0</ID><Operation>Decode</Operation><Payload>Payload-Sub1</Payload><BaseDecodePath>C:\ProgramData\Sophos\Sophos Endpoint Management\5.2.1\Updates\Secure\SDFs\SophosMA</BaseDecodePath><Username></Username><Password obfuscated="true"></Password><TreatAsSDF></TreatAsSDF></Action><Action><ID>ActionDeploySDF-Sub2-0</ID><Operation>Decode</Operation><Payload>Payload-Sub2</Payload><BaseDecodePath>C:\ProgramData\Sophos\Sophos Endpoint Management\5.2.1\Updates\Secure\SDFs\SophosPA</BaseDecodePath><Username></Username><Password obfuscated="true"></Password><TreatAsSDF></TreatAsSDF></Action><Action><ID>ActionGatherCurrencyData-SDDM</ID><Operation>GatherCurrencyData</Operation><Payload>Payload-SDDM</Payload><DisableReentrancyOptimisation></DisableReentrancyOptimisation></Action><Action><ID>ActionGatherCurrencyData-Sub0</ID><Operation>GatherCurrencyData</Operation><Payload>Payload-Sub0</Payload><DisableReentrancyOptimisation></DisableReentrancyOptimisation></Action><Action><ID>ActionGatherCurrencyData-Sub1</ID><Operation>GatherCurrencyData</Operation><Payload>Payload-Sub1</Payload><DisableReentrancyOptimisation></DisableReentrancyOptimisation></Action><Action><ID>ActionGatherCurrencyData-Sub2</ID><Operation>GatherCurrencyData</Operation><Payload>Payload-Sub2</Payload><DisableReentrancyOptimisation></DisableReentrancyOptimisation></Action><Action><ID>ActionGenerateCid-Sub0</ID><Operation>CIDGenerate</Operation><Library>CIDGen.dll</Library><Dependency>ActionDecodeEverything-Sub0</Dependency><DecodeAction>ActionDecodeEverything-Sub0</DecodeAction><Payload>Payload-Sub0</Payload></Action><Action><ID>ActionSelfUpdate-SDDM</ID><Operation>SelfUpdate</Operation><Dependency>ActionDecodeEverything-SDDM</Dependency><DecodeAction>ActionDecodeEverything-SDDM</DecodeAction><Payload>Payload-SDDM</Payload></Action><Action><ID>ActionSyncPrograms</ID><Operation>Synchronise</Operation><Subscription>SubscriptionGlobal</Subscription></Action><Action><ID>ActionSyncSupplements</ID><Operation>Synchronise</Operation><Subscription>SubscriptionGlobal</Subscription><SupplementsOnly></SupplementsOnly></Action><Action><ID>ActionUpdateLogViewerDictionaries</ID><CorrelationId>0</CorrelationId><Operation>UpdateLogViewerDictionary</Operation><Uri>http://sophos.bdcs.org.uk/downloads/Warehouse</Uri><TopLevelCatalogue>sdds.local</TopLevelCatalogue><User>bardaglea</User><Password obfuscated="true">Bwh6sl/UoyvJeZNTROB/1rlctgLlN3JwRH4=</Password></Action><Action><ID>ActionUpdateMetadata</ID><CorrelationId>0</CorrelationId><Operation>WarehouseStatus</Operation><Uri>http://sophos.bdcs.org.uk/downloads/Warehouse</Uri><TopLevelCatalogue>sdds.local</TopLevelCatalogue><User>bardaglea</User><Password obfuscated="true">Bwh6sl/UoyvJeZNTROB/1rlctgLlN3JwRH4=</Password></Action><Dispatcher><ID>DispatcherPrograms</ID><Type>Programs</Type><Schedule>SchedulePrograms</Schedule><Event>EventUpdateMetadata</Event><Event>EventPrograms</Event></Dispatcher><Dispatcher><ID>DispatcherSupplements</ID><Type>Supplements</Type><Schedule>ScheduleSupplements</Schedule><Event>EventSupplements</Event></Dispatcher><Event><ID>EventPrograms</ID><Action>ActionUpdateLogViewerDictionaries</Action><Action>ActionSyncPrograms</Action><Action>ActionGatherCurrencyData-Sub0</Action><Action>ActionDecodeEverything-Sub0</Action><Action>ActionGenerateCid-Sub0</Action><Action>ActionDeployCids-Sub0-0</Action><Action>ActionGatherCurrencyData-Sub1</Action><Action>ActionDeploySDF-Sub1-0</Action><Action>ActionGatherCurrencyData-Sub2</Action><Action>ActionDeploySDF-Sub2-0</Action><Action>ActionGatherCurrencyData-SDDM</Action><Action>ActionDecodeEverything-SDDM</Action><Action>ActionSelfUpdate-SDDM</Action></Event><Event><ID>EventSupplements</ID><Action>ActionSyncSupplements</Action><Action>ActionGatherCurrencyData-Sub0</Action><Action>ActionDecodeEverything-Sub0</Action><Action>ActionGenerateCid-Sub0</Action><Action>ActionDeployCids-Sub0-0</Action><Action>ActionGatherCurrencyData-Sub1</Action><Action>ActionDeploySDF-Sub1-0</Action><Action>ActionGatherCurrencyData-Sub2</Action><Action>ActionDeploySDF-Sub2-0</Action><Action>ActionGatherCurrencyData-SDDM</Action><Action>ActionDecodeEverything-SDDM</Action></Event><Event><ID>EventUpdateMetadata</ID><Action>ActionUpdateMetadata</Action></Event><LogSettings><ID>LangIndLog</ID><MaxAge>20</MaxAge><MaxSize>500</MaxSize></LogSettings><Payload><ID>Payload-SDDM</ID><Warehouse>sdds.local</Warehouse><RigidName>A845A8B5-6532-4EF1-B19E-1DB2B3CB73D1</RigidName><Version>RECOMMENDED</Version><BaseVersion>1</BaseVersion></Payload><Payload><ID>Payload-Sub0</ID><Warehouse>sdds.local</Warehouse><RigidName>F26F7EC0-1302-4DA7-8B6B-A5383051D41A</RigidName><Version>RECOMMENDED</Version><BaseVersion>10</BaseVersion></Payload><Payload><ID>Payload-Sub1</ID><Warehouse>sdds.local</Warehouse><RigidName>7D48A012-0C64-4F21-BA27-A9CEDF442749</RigidName><Version>0.0.0</Version><BaseVersion></BaseVersion></Payload><Payload><ID>Payload-Sub2</ID><Warehouse>sdds.local</Warehouse><RigidName>2DE69C24-D975-47b2-8D2F-6BEA861A9C75</RigidName><Version>RECOMMENDED</Version><BaseVersion>3</BaseVersion></Payload><Schedule><ID>SchedulePrograms</ID><TimeBlock>TimeBlock-Programs-0</TimeBlock></Schedule><Schedule><ID>ScheduleSupplements</ID><TimeBlock>TimeBlock-Supplements-0</TimeBlock></Schedule><Subscription><ID>SubscriptionGlobal</ID><UpdateSource>UpdateSource0</UpdateSource><UpdateSource>UpdateSource1</UpdateSource><Payload>Payload-Sub0</Payload><Payload>Payload-Sub1</Payload><Payload>Payload-Sub2</Payload><Payload>Payload-SDDM</Payload></Subscription><TimeBlock><ID>TimeBlock-Programs-0</ID><StartTime>0:00</StartTime><Duration>24:00</Duration><Interval>1:00</Interval></TimeBlock><TimeBlock><ID>TimeBlock-Supplements-0</ID><StartTime>0:00</StartTime><Duration>24:00</Duration><Interval>1:00</Interval></TimeBlock><UpdateSource><ID>UpdateSource0</ID><Path>http://sophos.bdcs.org.uk/downloads/Warehouse</Path><UserName>bardaglea</UserName><Password obfuscated="true">Bwh6sl/UoyvJeZNTROB/1rlctgLlN3JwRH4=</Password><Ordinal>0</Ordinal></UpdateSource><UpdateSource><ID>UpdateSource1</ID><Path>http://sophos.bardaglea.org.uk/downloads//Warehouse</Path><UserName>bardaglea</UserName><Password obfuscated="true">Bwjw7CTfrL9zUBluaRik0haYgKyBZ7fJCYA=</Password><Ordinal>1</Ordinal></UpdateSource></Config>] Dumped 32 objects.
    2019-02-15 13:32:07 : Cmd-Sock-768 <<
    2019-02-15 13:32:07 : Cmd-Sock-768 >> DumpDefaultTargetSite
    2019-02-15 13:32:07 : Cmd-Sock-768 << [R0000][C:\ProgramData\Sophos\Update Manager\Update Manager\][\\SJB-SR-SB3\SophosUpdate][ST-JOBARKING\SophosUpdateMgr][BwjCxYXw/0PUE9OdRqGaMmgXAkkY3WD4D/E=] Local path: C:\ProgramData\Sophos\Update Manager\Update Manager\ Remote path: \\SJB-SR-SB3\SophosUpdate Username: ST-JOBARKING\SophosUpdateMgr Obfuscated password: BwjCxYXw/0PUE9OdRqGaMmgXAkkY3WD4D/E=
    2019-02-15 13:32:07 : Cmd-Sock-768 <<
    2019-02-15 13:32:07 : Cmd-Sock-768 >> DeleteObject ProdRelReqAction-5d207ce2-ab92-4ca0-b172-0711aca59672
    2019-02-15 13:32:07 : Cmd-Sock-768 << [R0000] Succeeded.

  • In reply to Vivek VK:

    Hello Hello Vivek Krishnakumar,

    this is an uncommon setup. Both bdcs and bardaglea resolve to the same address (at least from here), nrcs.bardaglea has its own address. What is the purpose of this configuration, are bdcs and nrcs independent servers/SUMs? This setup might not work as expected although it doesn't explain the apparent hang.

    Schedule 'ScheduleSupplements' entered new TimeBlock, trigger offset = 43 minutes
    ...
    Schedule 'SchedulePrograms' entered new TimeBlock, trigger offset = 46 minutes
    this indicates that the snippet does not contain an actual update attempt, specifically what lead to an error like 'DispatcherPrograms-2019-02-12T00-55-43-106' skipped, because one or more associated events are still in progress. That's why I've suggested to collect all logs. It's hard to pinpoint the actual error if you are not familiar with the updating process and its logs, and many messages perceived as serious errors only indicate inherited errors and lead you up the garden path.

    An update starts with As far as I can see your updating schedule is one hour intervals for both detection data and software thus to potentially provide some insight the snippet (which could span more than one SUMTrace log) should contain both Started dispatcher with ID 'DispatcherSupplements ...' and Started dispatcher with ID 'DispatcherPrograms ...' and continue until the ... still in progress message.

    Christian